Vulnerabilities (CVE)

Filtered by vendor Oracle Subscribe
Filtered by product Communications Calendar Server
Total 21 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-14195 4 Debian, Fasterxml, Netapp and 1 more 14 Debian Linux, Jackson-databind, Active Iq Unified Manager and 11 more 2021-11-17 6.8 MEDIUM 8.1 HIGH
FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to org.jsecurity.realm.jndi.JndiRealmFactory (aka org.jsecurity).